$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa File: d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa (raw, json) Hash identifier: P/uv2DnAKh+HHA6/wQeZBuO1Zutq//pnWQm4apa6Vzc= Subject key identifier: CD:F3:24:0F:65:0B:5E:BB:04:E5:13:76:19:FE:FF:9A:23:E4:00:0B Certificate issuer: /CN=b2d9b16a-e15f-46c2-a578-0677307787a3 Certificate serial: 010D0C9F432858494039458676229D587E673F80 Authority key identifier: 20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 399686 IP address blocks: 172.111.0.0/22 maxlen: 24 172.111.0.0/24 maxlen: 24 172.111.1.0/24 maxlen: 24 172.111.2.0/24 maxlen: 24 172.111.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:45:86:76:22:9d:58:7e:67:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2d9b16a-e15f-46c2-a578-0677307787a3 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=31f8b28a-aa6b-457c-b2dc-3385dff8e508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2b:b5:11:f7:07:d2:5d:5d:f8:9e:1c:46:2d: fa:cd:df:c9:cd:cb:3a:0e:ad:b7:55:8a:29:69:78: 2a:fb:52:90:93:58:4f:6b:a4:8e:dc:d9:b8:66:0d: 51:6d:3c:db:15:9d:df:51:7b:f8:35:ad:1a:65:59: 0f:b5:8b:85:4d:66:65:d8:75:d8:5e:bb:3f:31:bd: 44:fb:1c:85:be:af:0f:9c:bd:49:73:06:73:5e:fa: 9f:ee:fc:ad:70:e1:a7:7b:ae:f7:b5:83:22:06:2b: 71:53:e9:da:fc:57:e9:8a:62:24:01:0c:84:24:8c: 4b:3c:21:5c:49:0d:6c:70:d1:83:18:a6:27:1b:aa: 56:a7:c8:e3:25:2e:0c:29:99:31:93:4f:5a:07:74: 27:39:67:5a:7a:6a:37:f3:7d:a9:b0:e3:c8:f2:09: b4:42:1e:fd:53:2a:5e:67:82:46:76:63:47:2a:ff: 61:9c:5d:5f:ce:a5:2f:56:e1:84:34:27:6c:66:a0: de:1c:1b:14:0a:d0:ab:b0:e0:4a:ce:7f:15:2f:a6: 5a:20:bb:e7:6b:6c:cb:e0:cc:a3:ba:f2:33:61:69: 8c:52:24:b1:47:a5:10:b4:e8:da:9b:48:02:7b:2c: 58:79:e6:9e:c9:9d:5c:7e:76:cd:a6:f2:0b:78:8a: 1f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F3:24:0F:65:0B:5E:BB:04:E5:13:76:19:FE:FF:9A:23:E4:00:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl X509v3 Authority Key Identifier: keyid:20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer sbgp-ipAddrBlock: critical IPv4: 172.111.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:43:14:97:18:f4:4a:4b:38:fb:f1:3d:1b:77:b5:06:64:2a: 80:ac:d1:2c:dc:77:46:71:95:3b:9b:4b:a1:93:a9:c2:73:68: 81:d8:48:85:d3:2c:d2:b7:e9:e8:06:71:c3:59:14:f3:47:db: 95:ea:f6:93:85:0a:c1:08:54:ff:95:3f:e3:96:9c:09:ad:4c: ce:85:af:53:12:47:17:53:46:48:b8:6e:a1:68:75:1e:55:4a: ca:e4:6c:b1:2a:40:c8:76:f7:a5:f6:b5:0f:43:b0:a1:f7:d7: df:6d:3d:e4:bf:ca:87:b4:45:60:6d:d2:46:47:bf:60:7f:93: 11:02:58:68:79:be:23:67:14:bd:53:95:5e:e6:d4:aa:bf:68: ef:f8:46:30:1b:7c:ce:ef:8e:39:55:a5:be:9d:46:55:8b:07: b2:c9:02:a6:96:b7:36:70:48:f1:fd:e4:5b:71:8c:5c:f3:59: 23:2e:12:03:8d:d6:8f:6f:6f:2b:0e:ad:50:59:a8:f5:df:9a: 9c:76:27:18:cb:13:10:2b:ff:b4:c6:3c:e0:7a:ee:c0:1b:08: 79:c4:3a:76:1a:27:24:d4:93:1d:32:91:d1:58:2f:ae:9a:97: 5b:b6:2f:90:53:23:fc:da:a2:0b:40:d1:a0:35:94:1a:54:29: 9b:fb:ad:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOUWGdiKdWH5nP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJkOWIxNmEtZTE1Zi00NmMyLWE1NzgtMDY3NzMwNzc4 N2EzMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk MzFmOGIyOGEtYWE2Yi00NTdjLWIyZGMtMzM4NWRmZjhlNTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSu1EfcH0l1d+J4cRi36zd/Jzcs6Dq23VYop aXgq+1KQk1hPa6SO3Nm4Zg1RbTzbFZ3fUXv4Na0aZVkPtYuFTWZl2HXYXrs/Mb1E +xyFvq8PnL1JcwZzXvqf7vytcOGne673tYMiBitxU+na/FfpimIkAQyEJIxLPCFc SQ1scNGDGKYnG6pWp8jjJS4MKZkxk09aB3QnOWdaemo3832psOPI8gm0Qh79Uype Z4JGdmNHKv9hnF1fzqUvVuGENCdsZqDeHBsUCtCrsOBKzn8VL6ZaILvna2zL4Myj uvIzYWmMUiSxR6UQtOjam0gCeyxYeeaeyZ1cfnbNpvILeIofbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3zJA9lC167BOUTdhn+/5oj5AALMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMmQ5 YjE2YS1lMTVmLTQ2YzItYTU3OC0wNjc3MzA3Nzg3YTMvZDdlZTRlNWMtODY1NS0z NmRlLWFjNTMtYzlkOWM5MjA4M2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjJkOWIxNmEtZTE1Zi00NmMyLWE1 NzgtMDY3NzMwNzc4N2EzL2IyZDliMTZhLWUxNWYtNDZjMi1hNTc4LTA2NzczMDc3 ODdhMy5jcmwwHwYDVR0jBBgwFoAUIEpA4zG5OEM/CEYzRRAWpoSxg2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMmQ5YjE2YS1lMTVmLTQ2YzItYTU3OC0wNjc3 MzA3Nzg3YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlDFJcY9EpLOPvxPRt3tQZkKoCs0Szcd0ZxlTubS6GTqcJzaIHYSIXT LNK36egGccNZFPNH25Xq9pOFCsEIVP+VP+OWnAmtTM6Fr1MSRxdTRki4bqFodR5V SsrkbLEqQMh296X2tQ9DsKH3199tPeS/yoe0RWBt0kZHv2B/kxECWGh5viNnFL1T lV7m1Kq/aO/4RjAbfM7vjjlVpb6dRlWLB7LJAqaWtzZwSPH95FtxjFzzWSMuEgON 1o9vbysOrVBZqPXfmpx2JxjLExAr/7TGPOB67sAbCHnEOnYaJyTUkx0ykdFYL66a l1u2L5BTI/zaogtA0aA1lBpUKZv7rZ8= -----END CERTIFICATE-----Generated at Sat Apr 26 19:20:17 2025 by rpki-client